AWS fsx documentation change
Summary
Added Ubuntu 24.04 installation instructions with GPG signature validation for package security
Security assessment
Documents GPG signature verification to prevent repository tampering, but does not indicate resolution of a specific existing vulnerability
Diff
diff --git a/fsx/latest/LustreGuide/install-lustre-client.md b/fsx/latest/LustreGuide/install-lustre-client.md index 6245a72c2..07db996db 100644 --- a/fsx/latest/LustreGuide/install-lustre-client.md +++ b/fsx/latest/LustreGuide/install-lustre-client.md @@ -437,0 +438,45 @@ This list includes the default install only packages, specified in the `yum.conf +You can get Lustre packages from the Ubuntu 24.04 Amazon FSx repository. To validate that the contents of the repository have not been tampered with before or during download, a GNU Privacy Guard (GPG) signature is applied to the metadata of the repository. Installing the repository fails unless you have the correct public GPG key installed on your system. + + 1. Open a terminal on your client. + + 2. Follow these steps to add the Amazon FSx Ubuntu repository: + + 1. If you have not previously registered an Amazon FSx Ubuntu repository on your client instance, download and install the required public key. Use the following command. + + wget -O - https://fsx-lustre-client-repo-public-keys.s3.amazonaws.com/fsx-ubuntu-public-key.asc | gpg --dearmor | sudo tee /usr/share/keyrings/fsx-ubuntu-public-key.gpg >/dev/null + + 2. Add the Amazon FSx package repository to your local package manager using the following command. + + sudo bash -c 'echo "deb [signed-by=/usr/share/keyrings/fsx-ubuntu-public-key.gpg] https://fsx-lustre-client-repo.s3.amazonaws.com/ubuntu noble main" > /etc/apt/sources.list.d/fsxlustreclientrepo.list && apt-get update' + + 3. Determine which kernel is currently running on your client instance, and update as needed. The Lustre client on Ubuntu 24.04 requires kernel `6.8.0-1024-aws` or later for both x86-based EC2 instances and Arm-based EC2 instances powered by AWS Graviton processors. + + 1. Run the following command to determine which kernel is running. + + uname -r + + 2. Run the following command to update to the latest Ubuntu kernel and Lustre version and then reboot. + + sudo apt install -y linux-aws lustre-client-modules-aws && sudo reboot + +If your kernel version is greater than `6.8.0-1024-aws` for both x86-based EC2 instances and Graviton-based EC2 instances, and you don’t want to update to the latest kernel version, you can install Lustre for the current kernel with the following command. + + sudo apt install -y lustre-client-modules-$(uname -r) + +The two Lustre packages that are necessary for mounting and interacting with your FSx for Lustre file system are installed. You can optionally install additional related packages such as a package containing the source code and packages containing tests that are included in the repository. + + 3. List all available packages in the repository by using the following command. + + sudo apt-cache search ^lustre + + 4. (Optional) If you want your system upgrade to also always upgrade Lustre client modules, make sure that the `lustre-client-modules-aws` package is installed using the following command. + + sudo apt install -y lustre-client-modules-aws + + + + +###### Note + +If you get a `Module Not Found` error, see To troubleshoot missing module errors. +